github analyzed 001d394

alexey-pelykh/qontoctl

github

CLI and MCP server for the Qonto banking API

maintainer
alexey-pelykh
license
AGPL-3.0
first seen
2026-06-14
last seen
2026-06-14
releases · 30d
4
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities60 tools
transport stdio · http counts 60 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • account_close

    Close a bank account

  • account_create

    Create a new bank account

  • account_iban_certificate

    Download IBAN certificate PDF for a bank account

  • account_list

    List all bank accounts for the organization

  • account_show

    Show details of a specific bank account

  • account_update

    Update an existing bank account

  • beneficiary_add

    Create a new SEPA beneficiary

  • beneficiary_list

    List SEPA beneficiaries in the organization

  • beneficiary_show

    Show details of a specific SEPA beneficiary

  • beneficiary_trust

    Trust one or more SEPA beneficiaries

  • beneficiary_untrust

    Untrust one or more SEPA beneficiaries

  • beneficiary_update

    Update an existing SEPA beneficiary

  • bulk_transfer_create

    Create a bulk SEPA transfer (auto-resolves VoP via bulk_verify_payee)

  • bulk_transfer_list

    List bulk transfers

  • bulk_transfer_show

    Show details of a specific bulk transfer

  • client_create

    Create a new client

  • client_delete

    Delete a client

  • client_invoice_cancel

    Cancel a finalized client invoice

  • client_invoice_create

    Create a draft client invoice with client and line items

  • client_invoice_delete

    Delete a draft client invoice

  • client_invoice_finalize

    Finalize a client invoice (assign number)

  • client_invoice_list

    List client invoices with optional filters

  • client_invoice_mark_paid

    Mark a client invoice as paid

  • client_invoice_send

    Send a client invoice to the client via email

  • client_invoice_show

    Show details of a specific client invoice

  • client_invoice_unmark_paid

    Unmark a client invoice paid status

  • client_invoice_update

    Update a draft client invoice

  • client_invoice_upload

    Upload a file to a client invoice

  • client_invoice_upload_show

    Show upload details for a client invoice

  • client_list

    List clients with optional pagination

  • client_show

    Show details of a specific client

  • client_update

    Update an existing client

  • internal_transfer_create

    Create an internal transfer between two bank accounts

  • label_list

    List all labels in the organization

  • label_show

    Show details of a specific label

  • membership_invite

    Invite a new member to the organization

  • membership_list

    List all memberships in the organization

  • membership_show

    Show the current authenticated user's membership

  • org_show

    Show organization details including name, slug, and bank accounts

  • product_list

    List catalogue products with optional pagination and sort

  • quote_list

    List quotes with optional filters

  • quote_show

    Show details of a specific quote

  • recurring_transfer_list

    List recurring transfers

  • recurring_transfer_show

    Show details of a specific recurring transfer

  • statement_list

    List bank statements with optional filters

  • statement_show

    Show details of a specific bank statement

  • terminal_list

    List Qonto Terminals linked to the organization

  • terminal_payment_create

    Initiate a payment on a terminal (returns 202 Accepted)

  • transaction_attachment_add

    Attach a file to a transaction

  • transaction_attachment_list

    List attachments for a transaction

  • transaction_attachment_remove

    Remove attachment(s) from a transaction

  • transaction_list

    List transactions for a bank account with optional filters

  • transaction_show

    Show details of a specific transaction

  • transfer_bulk_verify_payee

    Bulk verify payees (VoP)

  • transfer_cancel

    Cancel a pending SEPA transfer

  • transfer_create

    Create a SEPA transfer

  • transfer_list

    List SEPA transfers with optional filters

  • transfer_proof

    Download SEPA transfer proof PDF

  • transfer_show

    Show details of a specific SEPA transfer

  • transfer_verify_payee

    Verify a payee (Verification of Payee / VoP)

skills & danger signalsgithub-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 001d394 · analyzer v17 · 2h ago

skills & prompt files 1

code evidencevv2.0.5 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 29

  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/account.ts :4 import { writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/attachment.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/auth.ts :6 import { copyFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/bulk-transfer/create.ts :5 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/card/create.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/client-invoice.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/insurance.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/profile/add.ts :4 import { mkdir, writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/profile/list.ts :4 import { readdir } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/profile/remove.ts :4 import { unlink } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/request/create-multi-transfer.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/statement.ts :5 import { writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/supplier-invoice/bulk-create.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/transaction/attachment.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/transfer/bulk-verify-payee.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/transfer/proof.ts :4 import { writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/core/src/config/loader.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/core/src/config/resolve.ts :9 import { stat } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/core/src/config/writer.ts :4 import { mkdir, open, readFile, rename, unlink, writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/mcp/src/tools/attachment.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/mcp/src/tools/client-invoice.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/mcp/src/tools/insurance.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/packages/mcp/src/tools/supplier-invoice.ts :4 import { readFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/scripts/check-coverage-drift.js :28 import { readFileSync, writeFileSync, readdirSync, existsSync } from "node:fs";
  • fs alexey-pelykh-qontoctl-001d394/scripts/check-no-silent-skip.js :45 import { readFileSync, readdirSync, existsSync } from "node:fs";
  • fs alexey-pelykh-qontoctl-001d394/scripts/check-publish-manifest.js :19 import { mkdtempSync, rmSync, readFileSync, readdirSync } from "node:fs";
  • fs alexey-pelykh-qontoctl-001d394/scripts/contract-probe.ts :33 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs alexey-pelykh-qontoctl-001d394/scripts/diff-vitest-runs.js :29 import { readFileSync, existsSync } from "node:fs";
  • fs alexey-pelykh-qontoctl-001d394/scripts/list-nullable-audit-candidates.js :27 import { readFileSync, writeFileSync, readdirSync, existsSync, mkdirSync } from "node:fs";

shell / exec 3

  • shell alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/auth.ts :11 import { exec } from "node:child_process";
  • shell alexey-pelykh-qontoctl-001d394/scripts/check-licenses.js :17 import { execSync } from "node:child_process";
  • shell alexey-pelykh-qontoctl-001d394/scripts/check-publish-manifest.js :18 import { execSync } from "node:child_process";

network 6

  • net alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/auth.ts :4 import { createServer } from "node:http";
  • net alexey-pelykh-qontoctl-001d394/packages/cli/src/commands/statement.ts :92 const fileResponse = await fetch(file.file_url);
  • net alexey-pelykh-qontoctl-001d394/packages/core/src/auth/oauth-service.ts :152 const response = await fetch(revokeUrl, {
  • net alexey-pelykh-qontoctl-001d394/packages/core/src/http-client.ts :695 const response = await fetch(url, body !== undefined ? { method, headers, body } : { method, headers });
  • net alexey-pelykh-qontoctl-001d394/packages/core/src/testing/binary-response.ts :6 * Useful for mocking `fetch()` in tests for binary endpoints.
  • net alexey-pelykh-qontoctl-001d394/packages/core/src/testing/json-response.ts :6 * Useful for mocking `fetch()` in tests.

tool registrations 2

  • account_list alexey-pelykh-qontoctl-001d394/packages/mcp/src/tools/accounts.ts :19
  • name alexey-pelykh-qontoctl-001d394/scripts/check-coverage-drift.js :73

declared dependencies 14

  • @eslint/js@catalog:
  • @types/node@catalog:
  • @vitest/coverage-v8@catalog:
  • eslint@catalog:
  • eslint-config-prettier@catalog:
  • @tony.ganchev/eslint-plugin-header@catalog:
  • prettier@catalog:
  • tsx@catalog:
  • turbo@catalog:
  • typescript@catalog:
  • typescript-eslint@catalog:
  • vitest@catalog:
  • @qontoctl/core@workspace:^
  • zod@catalog: